Who we are
TDM Recruitment Ltd (“tdm“, “we“, “us“) is a recruitment agency based in Canterbury. We act as a data controller for the personal data we hold about candidates and professional contacts. We are registered with the Information Commissioner’s Office (ICO).
This notice explains what personal data we collect about you, why we collect it, how long we keep it, and what rights you have.
What data we collect
We may collect and hold the following personal data about you:
- Contact details (name, email address, phone number, address)
- Identification information
- Current and previous employment history
- Education, qualifications and professional memberships
- Notes about career preferences, availability and work-related interests
- References received from or about you
- Right-to-work documentation where required
- Any correspondence or communication between you and tdm
We collect this information via CVs, application forms, cover letters, telephone or video calls, emails, social media messages (e.g. LinkedIn) and third-party job sites.
Why we use your data & our lawful basis
| Purpose | Lawful basis |
|---|---|
| Managing your job application and the recruitment process | Legitimate interests / Contract |
| Sharing your details with prospective employers for relevant roles | Legitimate interests |
| Verifying references and conducting right-to-work checks | Legal obligation / Legitimate interests |
| Sending you relevant job opportunities and market insights | Legitimate interests / Consent (marketing) |
| Fraud prevention and identity verification | Legitimate interests / Legal obligation |
| Improving our recruitment processes and quality assurance | Legitimate interests |
Where we rely on legitimate interests, we have assessed that our interest in providing recruitment services does not override your rights. You may object to this processing at any time — see section 6.
Who we share your data with
We will only share your data where we have a lawful basis to do so:
- Clients — prospective employers for roles we are working on. Clients may not use your data for their own marketing.
- Our CRM provider (JobAdder, hosted by Amazon Web Services within the UK/EEA) — as our data processor under a written agreement.
- IT and operational service providers — who process data on our behalf under contract.
- Legal or regulatory authorities — where we are required to disclose data by law.
We do not sell your personal data to any third party.
How long we keep your data
| Data type | Retention period |
|---|---|
| Active candidate data | Held unless you ask us to delete it. Where we have had no contact with you for 5 years, we will send you a re-engagement message to confirm your preferences or remove you from our records. |
| Marketing consent records | Until consent is withdrawn. |
| Financial / contractual records | Up to 7 years (HMRC / Limitation Act 1980). |
You can ask us to delete your data at any time — see section 6.
Your rights
Under the UK GDPR you have the following rights:
Access: Request a copy of the data we hold about you.
Rectification: Ask us to correct inaccurate data.
Erasure: Ask us to delete your data (“right to be forgotten”).
Restrict processing: Ask us to pause processing while a query is resolved.
Portability: Receive your data in a portable, machine-readable format.
Object: Object to processing based on legitimate interests.
Human review: Request human review of any automated decision.
Withdraw consent: Withdraw consent for marketing at any time.
To exercise any right, contact us using the details in section 7. We will respond within one calendar month.
Contact us
To exercise your rights, make a subject access request, or ask any question about this notice:
Email: operations@tdm-recruitment.com
Post: Suite 2A, Orchard House, Orchard Street, Canterbury, CT2 8AR
Please mark your message “Subject Access Request” or “Data Protection Enquiry”. If you are unhappy with our response, you have the right to complain to the ICO at www.ico.org.uk.